Liste der Anhänge anzeigen (Anzahl: 2) Noch was zur Ergänzung:
Mein Betriebssystem ist Windowas XP. IOBIT-Familie sollte ich danach wohl deinstallieren?
Meine beruflich genutzten Programme laufen nur bis XP.
Die Datei OTL.txt ist eine Spur zu groß als Anhang. Ich füge sie hier als Text an.
Die Dateien EXTRAS.txt und FRST.txt befinden sich im Anhang. OTL: Code:
OTL logfile created on: 7/2/2018 5:52:16 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 85.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): c:\pagefile.sys 8188 8188 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 40.78 Gb Total Space | 11.11 Gb Free Space | 27.24% Space Free | Partition Type: NTFS
Drive D: | 30.14 Gb Total Space | 0.01 Gb Free Space | 0.02% Space Free | Partition Type: NTFS
Drive E: | 78.13 Gb Total Space | 1.32 Gb Free Space | 1.68% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet003
========== Win32 Services (SafeList) ==========
SRV - [2018/07/01 12:47:19 | 001,576,784 | ---- | M] (Advanced System Repair Inc.) [Auto] -- C:\Advanced System Repair Pro 1.6.0.0\tscmon.exe -- (tscmon)
SRV - [2018/04/24 04:13:26 | 002,130,192 | ---- | M] (IObit) [Auto] -- C:\Programme\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
SRV - [2018/03/27 08:32:52 | 004,707,104 | ---- | M] (Malwarebytes) [On_Demand] -- C:\Programme\Malwarebytes\Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2018/03/21 12:33:24 | 001,057,552 | ---- | M] (IObit) [Auto] -- C:\Programme\IObit\Advanced SystemCare\ASCService.exe -- (AdvancedSystemCareService11)
SRV - [2018/01/25 12:00:50 | 000,206,096 | ---- | M] (IObit) [Auto] -- C:\Programme\IObit\IObit Uninstaller\IUService.exe -- (IObitUnSvr)
SRV - [2017/09/13 05:16:40 | 000,440,808 | ---- | M] (Digital Wave Ltd.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\DVDVideoSoft\lib\app_updater.exe -- (DigitalWave.Update.Service)
SRV - [2017/05/10 03:14:49 | 000,067,640 | ---- | M] (F-Secure Corporation) [Disabled] -- C:\Programme\F-Secure\SAFE\apps\CCF_Reputation\fsorsp.exe -- (FSORSPClient)
SRV - [2016/03/11 09:14:26 | 000,186,840 | ---- | M] (F-Secure Corporation) [Disabled] -- C:\Programme\F-Secure\SAFE\fshoster32.exe -- (fshoster)
SRV - [2015/11/24 06:26:42 | 000,216,104 | ---- | M] (F-Secure Corporation) [On_Demand] -- C:\Programme\F-Secure\SAFE\apps\ComputerSecurity\Common\FSMA32.EXE -- (FSMA)
SRV - [2010/09/14 16:55:12 | 000,571,288 | ---- | M] (Affinegy, Inc.) [On_Demand] -- C:\Programme\Belkin\Router Setup and Monitor\BelkinService.exe -- (AffinegyService)
SRV - [2008/10/13 12:23:52 | 000,266,240 | ---- | M] () [Auto] -- C:\Programme\Linksys\WUSB54GC\WifiSvc.exe -- (WUSB54GC)
SRV - [2008/08/29 04:00:30 | 000,033,752 | ---- | M] (NOS Microsystems Ltd.) [On_Demand] -- C:\Programme\NOS\bin\getPlus_HelperSvc.exe -- (getPlus(R) Helper) getPlus(R)
SRV - [2007/03/12 07:49:46 | 000,271,920 | ---- | M] (Nero AG) [Disabled] -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2005/05/10 21:09:54 | 000,225,280 | ---- | M] (O&O Software GmbH) [Disabled] -- C:\WINDOWS\system32\oodag.exe -- (O&O Defrag)
SRV - [2004/10/21 22:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM)
SRV - [2003/06/03 09:52:22 | 001,200,128 | ---- | M] (PowerQuest Corporation) [Disabled] -- C:\Programme\PowerQuest Drive Image 7.0\Agent\PQV2iSvc.exe -- (V2i Protector)
SRV - [2002/11/25 02:12:32 | 000,049,152 | ---- | M] (GEAR Software) [Disabled] -- C:\WINDOWS\system32\gearsec.exe -- (GEARSecurity)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (utm5mtuz)
DRV - File not found [Kernel | On_Demand] -- -- (SetupNTGLM7X)
DRV - File not found [Kernel | On_Demand] -- -- (Profos)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (NTACCESS)
DRV - File not found [Kernel | On_Demand] -- -- (MSICPL)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] -- -- (GMSIPCI)
DRV - File not found [Kernel | On_Demand] -- -- (cpuz143)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2018/07/01 12:47:19 | 000,015,848 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\asrdmon.sys -- (asrdmon)
DRV - [2018/04/04 10:25:04 | 000,029,096 | ---- | M] (IObit.com) [File_System | System] -- C:\Programme\IObit\IObit Malware Fighter\Drivers\win7_x86\IMFSafeBox.sys -- (IMFSafeBox)
DRV - [2018/03/20 12:33:46 | 000,031,680 | ---- | M] (IObit.com) [Kernel | On_Demand] -- C:\Programme\IObit\IObit Malware Fighter\Drivers\wxp_x86\RegFilter.sys -- (RegFilter)
DRV - [2018/03/20 12:33:44 | 000,247,744 | ---- | M] (IObit) [File_System | On_Demand] -- C:\Programme\IObit\IObit Malware Fighter\Drivers\wxp_x86\IMFFilter.sys -- (IMFFilter)
DRV - [2018/03/20 12:33:18 | 000,017,264 | ---- | M] (IObit.com) [File_System | System] -- C:\Programme\IObit\IObit Malware Fighter\Drivers\win7_x86\IMFMBRProtect.sys -- (IMFMBRProtect)
DRV - [2018/03/20 12:33:16 | 000,014,168 | ---- | M] (IObit.com) [Kernel | On_Demand] -- C:\Programme\IObit\IObit Malware Fighter\Drivers\win7_x86\IMFForceDelete.sys -- (IMFForceDelete)
DRV - [2018/03/20 12:33:14 | 000,020,336 | ---- | M] (IObit.com) [Kernel | On_Demand] -- C:\Programme\IObit\IObit Malware Fighter\Drivers\win7_x86\IMFDownProtect.sys -- (IMFDownProtect)
DRV - [2018/03/20 12:33:12 | 000,025,120 | ---- | M] (IObit.com) [Kernel | System] -- C:\WINDOWS\system32\drivers\IMFCameraProtect.sys -- (IMFCameraProtect)
DRV - [2018/03/07 12:37:58 | 000,147,344 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.)
DRV - [2018/03/06 01:39:57 | 000,109,456 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV - [2018/03/06 01:39:46 | 000,075,200 | ---- | M] (Alcorlink Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AmUStor.sys -- (AmUStor)
DRV - [2018/03/06 01:38:26 | 000,030,720 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\l251x86.sys -- (AtcL002)
DRV - [2018/03/06 01:26:32 | 000,023,840 | ---- | M] (REALiX(tm)) [Kernel | System] -- C:\WINDOWS\system32\drivers\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2018/01/11 05:21:32 | 000,020,336 | -H-- | M] (IObit.com) [Kernel | On_Demand] -- C:\Programme\IObit\IObit Uninstaller\drivers\win7_x86\IURegProcessFilter.sys -- (IURegProcessFilter)
DRV - [2017/11/01 09:52:33 | 000,050,744 | ---- | M] (F-Secure Corporation) [Kernel | On_Demand] -- C:\Programme\F-Secure\SAFE\apps\CCF_Scanning\bin\fsnixp32.sys -- (fsni)
DRV - [2017/11/01 09:52:33 | 000,023,608 | ---- | M] (F-Secure Corporation) [Kernel | On_Demand] -- C:\Programme\F-Secure\SAFE\apps\CCF_Scanning\bin\fsnitdi32.sys -- (fsnitdi)
DRV - [2017/10/02 08:57:47 | 000,095,912 | ---- | M] (F-Secure Corporation) [Kernel | System] -- C:\Programme\F-Secure\SAFE\apps\ComputerSecurity\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2017/06/28 06:47:56 | 000,164,528 | ---- | M] (F-Secure Corporation) [Kernel | On_Demand] -- C:\Programme\F-Secure\SAFE\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2017/06/06 10:00:24 | 000,020,368 | -H-- | M] (IObit.com) [File_System | On_Demand] -- C:\Programme\IObit\IObit Uninstaller\drivers\win7_x86\IUFileFilter.sys -- (IUFileFilter)
DRV - [2016/11/23 07:24:06 | 000,015,216 | ---- | M] (IObit) [Kernel | On_Demand] -- C:\Programme\IObit\Advanced SystemCare\drivers\Monitor_x86.sys -- (iobit_monitor_server)
DRV - [2016/07/07 09:41:59 | 000,062,160 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\system32\drivers\fsbts.sys -- (fsbts)
DRV - [2014/11/23 21:40:10 | 000,046,488 | ---- | M] (Anvisoft) [File_System | System] -- C:\WINDOWS\system32\drivers\asd2fsm.sys -- (asd2fsm)
DRV - [2014/11/23 21:40:10 | 000,040,344 | ---- | M] (Anvisoft) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\asdids.sys -- (asdidsmp)
DRV - [2014/11/23 21:40:10 | 000,040,344 | ---- | M] (Anvisoft) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\asdids.sys -- (asdids)
DRV - [2013/03/22 04:52:16 | 000,126,592 | ---- | M] (HID Global Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\cxbu0wdm.sys -- (cxbu0wdm)
DRV - [2013/02/13 17:26:02 | 000,033,512 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2013/01/13 10:33:44 | 000,013,560 | ---- | M] (GFI Software) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\gfibto.sys -- (gfibto)
DRV - [2010/08/22 16:01:54 | 000,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AFGSp50.sys -- (AFGSp50)
DRV - [2008/06/26 00:26:36 | 000,335,104 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2007/11/01 02:38:56 | 004,620,288 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/04/11 09:32:58 | 000,036,112 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/04/11 09:32:52 | 000,034,832 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/04/11 09:32:30 | 000,020,496 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2006/07/16 21:53:20 | 000,030,368 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\usb2vcom.sys -- (usb2vcom)
DRV - [2004/08/12 22:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2003/06/03 09:52:24 | 000,123,957 | ---- | M] (StorageCraft) [File_System | Boot] -- C:\WINDOWS\System32\drivers\PQV2i.sys -- (PQV2i)
DRV - [2003/06/03 09:52:20 | 000,046,900 | ---- | M] (PowerQuest Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\PQIMount.sys -- (PQIMount)
DRV - [2002/09/16 11:32:08 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
========== Standard Registry (All) ==========
========== Internet Explorer ==========
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/#web/result?source=art&q=
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = ${SEARCH_URL_IE7}
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\.DEFAULT\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\systemprofile_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\User1_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/#web/result?source=art&q=
IE - HKU\User1_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/#web/result?source=art&q=
IE - HKU\User1_ON_C\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\User1_ON_C\Software\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKU\User1_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\User1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/#web/result?source=art&q=
IE - HKU\User1_ON_C\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKU\User1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_30_0_0_113.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf:
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf:
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp:
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf:
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin:
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ols@f-secure.com: C:\Programme\F-Secure\SAFE\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2017/11/01 09:52:36 | 000,020,480 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 52.9.0 ESR\extensions\\Components: C:\Programme\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 52.9.0 ESR\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins
[2018/07/01 10:55:43 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
O1 HOSTS File: ([2018/03/05 12:17:27 | 000,444,629 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 15271 more lines...
O2 - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Programme\IObit\IObit Uninstaller\UninstallExplorer.dll (IObit)
O2 - BHO: (no name) - {45BBE08D-81C5-4A67-AF20-B2A077C67747} - No CLSID value found.
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - No CLSID value found.
O2 - BHO: (IObit Surfing Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Programme\IObit\IObit Malware Fighter\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (IObit Ads Removal) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Programme\IObit\IObit Malware Fighter\Surfing Protection\Adblock\ADBlock.dll (IObit)
O3 - HKLM\..\Toolbar: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Programme\IObit\IObit Uninstaller\UninstallExplorer.dll (IObit)
O3 - HKU\Administrator_ON_C\..\Toolbar\ShellBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKU\User1_ON_C\..\Toolbar\ShellBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKU\User1_ON_C\..\Toolbar\WebBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKU\User1_ON_C\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKU\User1_ON_C\..\Toolbar\WebBrowser: (&Links) - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
O4 - HKLM..\Run: [IObit Malware Fighter] C:\Programme\IObit\IObit Malware Fighter\IMF.exe (IObit)
O4 - HKU\.DEFAULT..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\User1_ON_C..\Run: [Advanced System Repair Pro] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService.NT-AUTORITÄT_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\systemprofile_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\User1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\User1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
O7 - HKU\User1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKU\User1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 0
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} Reg Error: Value error. (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} Reg Error: Value error. (Java Plug-in 1.5.0_06)
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} Reg Error: Value error. (Shockwave Flash Object)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\System32\Userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2008/09/13 14:49:49 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011/11/16 09:24:02 | 000,000,000 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2008/09/13 14:49:49 | 000,000,000 | ---- | M] () - E:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (oodbs) - C:\WINDOWS\System32\oodbs.exe (O&O Software GmbH)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2018/07/01 12:47:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\User1\Startmenü\Programme\Advanced System Repair Pro
[2018/07/01 12:47:06 | 000,000,000 | ---D | C] -- C:\Advanced System Repair Pro 1.6.0.0
[2018/07/01 12:46:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TSRProSettings
[2018/07/01 11:34:05 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\User1\Recent
[2018/06/14 11:32:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\User1\Eigene Bilder
[2018/06/10 00:47:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Advanced SystemCare
[2008/09/13 14:46:29 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Programme\calc.exe
[6 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\Dokumente und Einstellungen\User1\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\User1\Desktop\*.tmp -> ]
[108 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2018/07/01 14:24:14 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2018/07/01 14:18:13 | 001,481,713 | ---- | M] () -- C:\WINDOWS\System32\OODBS.lor
[2018/07/01 12:47:33 | 000,000,535 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Advanced System Repair Pro.lnk
[2018/07/01 12:47:19 | 000,015,848 | ---- | M] () -- C:\WINDOWS\System32\drivers\asrdmon.sys
[2018/07/01 12:35:54 | 000,003,784 | ---- | M] () -- C:\WINDOWS\System32\nvAppTimestamps
[2018/07/01 12:25:21 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2018/07/01 04:39:02 | 000,000,320 | -H-- | M] () -- C:\WINDOWS\tasks\CCleaner Update.job
[2018/06/20 16:55:08 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\Driver Booster Scheduler.job
[2018/06/20 16:48:33 | 000,000,266 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag_Update.job
[2018/06/20 16:46:12 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2018/06/20 15:58:13 | 000,295,462 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2018/06/20 09:37:10 | 000,842,240 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2018/06/20 09:37:09 | 000,175,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2018/06/16 05:56:23 | 000,059,904 | ---- | M] () -- C:\Dokumente und Einstellungen\User1\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2018/06/14 11:30:13 | 000,001,420 | ---- | M] () -- C:\WINDOWS\Ulead32.ini
[2018/06/10 00:47:26 | 000,001,778 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Advanced SystemCare 11.lnk
[2018/06/10 00:47:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Advanced SystemCare
[2018/06/10 00:47:23 | 000,001,796 | ---- | M] () -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Advanced SystemCare 11.lnk
[2018/06/09 16:43:22 | 000,000,123 | ---- | M] () -- C:\Dokumente und Einstellungen\User1\Desktop\gute Haushaltstipps.url
[2018/06/09 12:47:18 | 000,220,896 | ---- | M] (Malwarebytes) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys
[6 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\Dokumente und Einstellungen\User1\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\User1\Desktop\*.tmp -> ]
[108 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2018/07/01 12:47:33 | 000,000,535 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Advanced System Repair Pro.lnk
[2018/07/01 12:47:19 | 000,015,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\asrdmon.sys
[2018/06/10 00:47:26 | 000,001,778 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Advanced SystemCare 11.lnk
[2018/06/09 16:42:29 | 000,000,123 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\Desktop\gute Haushaltstipps.url
[2018/05/07 05:58:46 | 000,058,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\mbae.sys
[2018/03/06 01:39:46 | 000,005,115 | ---- | C] () -- C:\WINDOWS\System32\AmUStor.ini
[2018/03/06 01:39:46 | 000,000,124 | ---- | C] () -- C:\WINDOWS\System32\VendorCmd6485_SetSSC.bin
[2018/03/06 01:39:46 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\VendorCmd6485.bin
[2018/03/06 01:39:46 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\CardDetect6485.bin
[2018/03/06 01:39:30 | 001,122,776 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2018/03/06 01:39:30 | 001,122,776 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2018/03/06 01:39:30 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2018/03/06 01:39:13 | 002,294,284 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2018/03/04 01:47:04 | 000,000,164 | ---- | C] () -- C:\WINDOWS\System32\eamclean.dat
[2018/02/13 04:45:20 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\GkSui20.EXE
[2018/01/10 05:25:03 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
[2016/04/02 11:01:08 | 000,062,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\fsbts.sys
[2016/01/28 08:32:24 | 000,796,768 | ---- | C] () -- C:\WINDOWS\System32\EMRegSys.dll
[2015/10/23 18:48:32 | 000,300,984 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1801674531-1004336348-2146291641-1003-0.dat
[2015/10/23 17:54:53 | 000,295,462 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2015/04/08 08:40:38 | 000,009,301 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\ESt2013_*****_Michael.elfo
[2015/04/08 06:59:51 | 000,008,816 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\EUER2013_E_B_L_E_Michael.elfo
[2015/01/21 11:23:50 | 000,640,728 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2015/01/21 08:46:35 | 000,004,072 | ---- | C] () -- C:\WINDOWS\System32\LavasoftTcpService.ini
[2013/08/29 12:49:31 | 000,005,519 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\ESt2012_*****_Michael.elfo
[2013/08/29 08:32:48 | 000,005,476 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\EUER2012_E_B_L_E_Michael.elfo
[2013/08/25 14:14:14 | 000,059,392 | R--- | C] () -- C:\WINDOWS\System32\streamhlp.dll
[2013/07/04 12:13:24 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\GkSui18.EXE
[2013/05/27 05:25:20 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/11/20 12:40:02 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/11/01 11:02:03 | 000,001,634 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2012/10/13 05:23:17 | 000,000,049 | ---- | C] () -- C:\WINDOWS\System32\urhtps.dat
[2010/08/04 06:12:56 | 000,000,020 | ---- | C] () -- C:\WINDOWS\eplan.ini
[2009/12/10 03:21:15 | 000,000,029 | ---- | C] () -- C:\WINDOWS\System32\getfile.dat
[2009/06/23 03:37:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/06/18 07:57:38 | 000,102,400 | ---- | C] () -- C:\WINDOWS\removeark.exe
[2009/06/18 07:57:38 | 000,086,016 | ---- | C] () -- C:\WINDOWS\removearkold.exe1
[2009/06/18 07:40:16 | 000,030,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\usb2vcom.sys
[2009/05/04 09:22:13 | 000,115,728 | ---- | C] () -- C:\WINDOWS\cdman.exe
[2009/05/04 09:22:13 | 000,032,784 | ---- | C] () -- C:\WINDOWS\UNARJ.DLL
[2009/02/26 15:48:29 | 000,000,186 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\default.pls
[2008/10/23 05:21:47 | 000,000,042 | ---- | C] () -- C:\WINDOWS\Flachdach-Atlas.INI
[2008/09/17 06:37:53 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/09/17 04:08:49 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2008/09/16 16:36:40 | 000,045,056 | ---- | C] () -- C:\WINDOWS\wsutil.exe
[2008/09/16 16:36:40 | 000,000,031 | ---- | C] () -- C:\WINDOWS\wwwbatch.ini
[2008/09/16 16:24:27 | 000,131,072 | R--- | C] () -- C:\WINDOWS\System32\smdll.dll
[2008/09/16 16:24:22 | 000,266,240 | R--- | C] () -- C:\WINDOWS\System32\HookShield.dll
[2008/09/16 16:24:22 | 000,262,144 | R--- | C] () -- C:\WINDOWS\System32\HookMAp.dll
[2008/09/16 16:24:22 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32\Auxiliary.dll
[2008/09/16 16:24:21 | 000,009,728 | R--- | C] () -- C:\WINDOWS\System32\sysinfoX64.sys
[2008/09/16 16:24:21 | 000,008,192 | R--- | C] () -- C:\WINDOWS\System32\sysinfo.sys
[2008/09/16 16:24:20 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\sw24.exe
[2008/09/16 16:10:00 | 000,059,904 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/16 15:55:19 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2008/09/14 06:49:07 | 000,172,032 | ---- | C] () -- C:\WINDOWS\WsBtn.dll
[2008/09/14 05:39:57 | 000,001,420 | ---- | C] () -- C:\WINDOWS\Ulead32.ini
[2008/09/14 05:39:43 | 000,284,160 | ---- | C] () -- C:\WINDOWS\unin0407.exe
[2008/09/14 03:13:10 | 000,000,138 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/14 02:12:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008/09/14 01:52:47 | 000,001,024 | ---- | C] () -- C:\Dokumente und Einstellungen\User1\.rnd
[2008/09/14 01:39:01 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/09/14 01:11:54 | 000,000,111 | ---- | C] () -- C:\WINDOWS\telephon.ini
[2008/09/14 00:55:46 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008/09/13 16:13:53 | 000,000,000 | ---- | C] () -- C:\WINDOWS\msicpl.ini
[2008/09/13 15:39:46 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/09/13 15:38:48 | 000,340,240 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/09/13 15:23:51 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2008/09/13 15:17:15 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2008/09/13 15:17:12 | 000,010,287 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2008/09/13 15:17:00 | 000,012,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008/09/13 15:15:07 | 000,081,984 | ---- | C] () -- C:\WINDOWS\System32\bdod.bin
[2008/09/13 14:51:27 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/09/13 14:47:11 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/04/14 02:06:26 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/06/28 12:43:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007/06/28 12:43:00 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2007/06/28 12:43:00 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007/06/28 12:43:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2007/06/28 12:43:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007/06/28 12:43:00 | 001,018,772 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007/06/28 12:43:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007/06/28 12:43:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2007/06/28 12:43:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2007/06/28 12:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/12/31 01:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/07/27 21:31:00 | 000,005,816 | ---- | C] () -- C:\WINDOWS\UN040622.INI
[2003/02/20 11:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001/08/23 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 08:00:00 | 000,637,762 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2001/08/23 08:00:00 | 000,636,932 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2001/08/23 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 08:00:00 | 000,119,660 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2001/08/23 08:00:00 | 000,119,420 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2001/08/23 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 08:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2018/04/10 08:07:46 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\DVDVideoSoft
[2017/01/29 06:58:10 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\Foxit Software
[2018/02/12 16:25:05 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\IObit
[2015/10/24 16:54:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Anwendungsdaten\AVG
[2015/10/24 22:17:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Anwendungsdaten\Foxit Software
[2015/10/23 05:31:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Anwendungsdaten\TuneUp Software
[2015/10/24 22:16:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Foxit Software
[2011/12/04 12:37:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Auslogics
[2015/10/23 16:14:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\AVG
[2009/10/15 15:08:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\BMSEV
[2013/09/11 07:58:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Chipcardmaster
[2009/08/29 12:08:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\CoSoSys
[2018/03/10 07:29:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\DVDVideoSoft
[2013/01/13 15:01:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\ElevatedDiagnostics
[2013/08/29 07:01:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\elsterformular
[2013/02/03 07:32:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Engelmann Media
[2018/03/06 08:57:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Foxit Software
[2012/12/30 16:31:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Garmin
[2011/10/13 05:25:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\HDX4 GmbH
[2018/05/14 06:28:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\IObit
[2008/09/14 03:29:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\IsolatedStorage
[2008/09/14 03:21:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Leadertech
[2009/06/18 07:46:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Nokia
[2015/10/23 17:39:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Opera Software
[2009/02/19 09:55:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\Participatory Culture Foundation
[2009/06/18 07:46:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\PC Suite
[2009/02/19 11:21:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\PCF-VLC
[2015/10/23 17:27:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\RHEng
[2013/08/25 14:35:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\TrojanHunter
[2012/10/30 13:50:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User1\Anwendungsdaten\TuneUp Software
[2011/12/03 14:19:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Affinegy
[2018/03/05 13:13:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software
[2015/10/23 16:14:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG
[2015/10/23 05:20:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BitDefender
[2009/10/15 15:08:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BMSEV
[2018/03/03 22:16:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\boost_interprocess
[2013/08/25 20:05:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CheckPoint
[2012/10/30 13:50:16 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2018/03/10 05:11:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DigitalWave.ApplicationUpdater_files
[2013/08/29 06:59:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\elsterformular
[2018/03/04 01:56:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Emsisoft
[2016/01/30 09:22:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Engelmann Media
[2018/03/06 02:23:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure
[2018/03/06 08:57:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Foxit ContentPlatform
[2018/03/08 13:55:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Foxit Software
[2011/08/14 07:15:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HDX4 GmbH
[2016/03/31 17:58:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HitmanPro
[2009/06/18 07:42:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations
[2018/06/10 00:47:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IObit
[2009/07/03 13:20:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Licenses
[2008/09/13 15:23:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier
[2018/03/06 01:18:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia
[2014/04/01 12:18:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache
[2015/11/26 12:28:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\opencpn
[2018/03/03 21:34:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Package Cache
[2009/06/18 07:46:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2008/09/14 03:12:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PowerQuest
[2018/06/20 16:47:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ProductData
[2018/05/07 05:12:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
[2013/08/26 06:29:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Simply Super Software
[2018/03/20 05:45:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2018/07/01 12:57:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TSRProSettings
[2015/10/23 05:37:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2017/12/18 07:36:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip
[2018/03/06 00:58:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{13CFD044-61E4-4EAC-AD61-02536D961216}
[2018/05/14 07:19:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
[2018/07/01 04:39:02 | 000,000,320 | -H-- | M] () -- C:\WINDOWS\Tasks\CCleaner Update.job
[2018/06/20 16:55:08 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\Driver Booster Scheduler.job
[2018/03/06 03:25:26 | 000,000,222 | ---- | M] () -- C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Benachrichtigung – Anmeldung.job
[2018/03/06 03:25:29 | 000,000,216 | ---- | M] () -- C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
[2018/06/20 16:48:33 | 000,000,266 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag_Update.job
[2014/06/06 00:30:51 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
========== Purity Check ==========
========== Files - Unicode (All) ==========
[2013/10/21 12:39:44 | 102,171,793 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\駩꛲唴6
[2013/10/16 09:00:55 | 102,171,793 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\駩꛲唴6
[2013/10/15 22:38:10 | 101,288,804 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\摇唴6
[2013/10/12 16:57:12 | 101,288,804 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\摇唴6
[2013/10/12 10:57:23 | 100,634,370 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\涽亂唴6
[2013/10/12 10:57:23 | 100,634,370 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\涽亂唴6
[2013/10/11 23:45:08 | 100,595,853 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\♐唴6
[2013/10/10 23:14:37 | 100,595,853 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\♐唴6
[2013/10/10 09:29:24 | 100,267,706 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\쐌햰唴6
[2013/10/09 20:40:29 | 100,267,706 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\쐌햰唴6
[2013/10/09 08:13:30 | 100,120,694 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㔸愔唴6
[2013/10/01 11:24:36 | 100,120,694 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㔸愔唴6
[2013/10/01 03:40:26 | 098,602,865 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㪩龞唴6
[2013/09/29 06:50:00 | 098,602,865 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㪩龞唴6
[2013/09/28 07:21:49 | 098,430,869 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\Ʒ됓唴6
[2013/09/27 22:24:19 | 098,430,869 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\Ʒ됓唴6
[2013/09/27 05:18:24 | 098,201,609 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\違ﱙ唴6
[2013/09/20 14:54:46 | 098,201,609 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\違ﱙ唴6
[2013/09/20 07:16:49 | 098,474,815 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㜙ꚫ唴6
[2013/09/19 12:44:35 | 098,474,815 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\㜙ꚫ唴6
[2013/09/18 19:17:01 | 098,201,083 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\뛷唴6
[2013/09/15 00:40:48 | 098,201,083 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\뛷唴6
[2013/09/13 10:20:44 | 097,463,612 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\媟煠唴6
[2013/09/12 18:54:01 | 097,463,612 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\媟煠唴6
[2013/09/12 13:18:57 | 097,373,152 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\才즵唴6
[2013/09/12 13:18:57 | 097,373,152 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\才즵唴6
[2013/09/07 05:19:12 | 096,511,884 | ---- | M] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\唴6
[2013/09/03 13:04:11 | 096,511,884 | ---- | C] ()(C:\WINDOWS\System32\???6) -- C:\WINDOWS\System32\唴6
========== Alternate Data Streams ==========
@Alternate Data Stream - 150 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:CB0AACC9
@Alternate Data Stream - 128 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:EBAA0CD9
@Alternate Data Stream - 122 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:7631EA83
< End of report >
|
